Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/H_t-0i09Nz51vAfcs2hPW9NEsrI.roa
File: H_t-0i09Nz51vAfcs2hPW9NEsrI.roa (raw, json)
Hash identifier: fP10GAyF8l/eBmQCFKvXY+i9TjMttCF86C9GVktALSE=
Subject key identifier: 1F:FB:7E:D2:2D:3D:37:3E:75:BC:07:DC:B3:68:4F:5B:D3:44:B2:B2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 015B9F51
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/H_t-0i09Nz51vAfcs2hPW9NEsrI.roa
Signing time: Fri 03 Jun 2022 10:24:20 +0000
ROA not before: Fri 03 Jun 2022 10:24:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 84.32.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22781777 (0x15b9f51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 3 10:24:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ffb7ed22d3d373e75bc07dcb3684f5bd344b2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:64:6d:b6:08:16:7c:d6:a7:5a:0a:cb:ff:
0e:8e:21:00:f6:22:ac:d1:dd:02:ea:7d:2b:0e:eb:
e0:87:88:1b:19:c7:4f:e7:c7:43:9d:28:bf:9c:7e:
d8:79:30:fe:0d:15:9f:e4:0c:3b:7f:2d:23:c1:68:
1f:73:01:6b:43:6d:ca:c0:ae:8e:fd:12:39:82:1e:
fa:00:ab:da:a7:98:1a:f6:ae:2d:8b:2d:86:af:92:
60:21:61:7b:84:67:ee:9c:3e:52:60:e6:41:7e:6f:
17:c1:3f:6f:09:59:56:69:00:56:7e:6d:ee:d7:bf:
14:ec:5f:d3:f0:95:e4:e4:d6:36:32:b7:a3:43:8d:
e2:06:e3:dc:9c:0b:00:b2:ea:aa:f4:37:28:0e:05:
73:9a:5a:92:60:b4:51:a1:65:9b:65:18:82:b4:1c:
a5:93:69:f4:bd:cc:f2:a6:cf:bb:a6:24:a9:80:e5:
56:8e:d0:49:41:6e:58:20:71:09:70:51:15:f1:33:
e9:58:55:63:76:fe:97:52:78:7e:e8:4c:af:8d:46:
a4:e1:72:85:62:c1:8d:76:af:af:68:90:13:c3:76:
84:55:fb:c4:e6:12:a9:68:a6:d3:4b:57:28:37:de:
26:76:b2:2c:38:61:ca:5d:01:79:1d:ac:00:39:22:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FB:7E:D2:2D:3D:37:3E:75:BC:07:DC:B3:68:4F:5B:D3:44:B2:B2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/H_t-0i09Nz51vAfcs2hPW9NEsrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.83.0/24
Signature Algorithm: sha256WithRSAEncryption
98:33:c9:de:5b:8d:35:94:c6:4e:bd:da:46:97:2c:98:15:c4:
37:70:75:dd:25:13:64:32:9e:a3:e2:39:c7:4d:7e:2b:5d:c4:
87:cc:64:8c:bc:24:e0:66:74:16:fb:9f:92:97:90:65:aa:bd:
11:2e:9a:5a:69:fc:de:06:5a:7f:bf:dc:a9:b6:01:2b:15:99:
47:eb:70:ce:8d:f5:6a:11:1b:2a:bc:3d:85:53:4e:ac:f1:df:
67:10:16:e9:98:17:bd:40:a4:fe:44:72:e0:1a:d2:4f:83:d3:
92:ed:30:78:a5:ec:a1:44:c1:3d:f2:9f:b1:a3:d8:93:f6:4f:
49:74:77:b0:a5:34:9c:9e:8a:aa:00:a9:78:62:8f:a0:90:61:
29:a5:f5:37:a7:c9:33:fd:ee:b9:6e:de:d7:53:30:09:ba:8b:
a5:fd:24:33:0f:eb:7b:22:ac:a5:90:f9:18:4f:fd:ec:b1:a0:
5e:88:9e:5c:48:47:76:2e:54:6f:fc:c3:80:1c:89:b2:a6:c9:
01:86:7c:23:73:be:27:de:0a:fc:4e:55:57:09:dd:68:b1:9e:
da:96:65:50:f4:af:1d:e7:7e:2d:c7:a8:3d:6c:93:12:e3:bd:
c7:f5:33:37:6d:c6:2f:7e:ea:80:0f:06:bf:5a:51:21:e9:c6:
0b:ed:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org